There is no dedicated cryptocurrency or digital asset law in Timor-Leste as of 2025–2026, and no authority has been designated to implement FATF-style travel-rule requirements for virtual asset service providers (VASPs). The primary AML/CFT framework is established under Law No. 17/2011 (Anti-Money Laundering and Combating the Financing of Terrorism), which creates the Financial Intelligence Unit (FIU) and sets obligations for financial institutions—but this law predates specific virtual asset provisions and contains no travel-rule requirements for VASPs. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003 [Note: Immigration and Asylum Act cited only for context; it does not govern AML/CFT.]

The Central Bank of Timor-Leste (Banco Central de Timor-Leste, BCTL) derives its authority from Law No. 5/2011 (Central Bank Law) and the Financial Sector Legal Framework (Law No. 13/2019), but no legislation grants it explicit authority over cryptocurrency or digital asset businesses, and no VASP licensing regime exists. Timor-Leste International Travel Information

The FIU is established under Law No. 17/2011, Article 30, not the Immigration and Asylum Act. As of the 2023 APG Mutual Evaluation Report, the FIU has not issued specific guidance on virtual assets or travel-rule compliance. Timor-Leste Travel Advisory | Travel.State.gov

The practical reality is that crypto businesses operate in a legal vacuum: there is no regulator with explicit VASP competence, no registration pathway, and no enforcement precedent specific to digital assets. Timor-Leste Travel Advice & Safety | Smartraveller

Businesses considering operations in Timor-Leste face significant legal uncertainty regarding travel-rule compliance, as the concept has not been incorporated into any domestic statute or regulation. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC

The Central Bank of Timor-Leste (Banco Central de Timor-Leste, BCTL) is the monetary authority and financial regulator, established under Law No. 5/2011 (Central Bank Law). Its mandate includes licensing and supervising banks, payment institutions, and other financial institutions under the Financial Sector Legal Framework (Law No. 13/2019). No legislation grants it explicit authority over cryptocurrency or digital asset businesses. Timor-Leste International Travel Information

The Ministry of Finance oversees fiscal policy and financial sector matters under the Financial Sector Legal Framework (Law No. 13/2019) and relevant decree-laws, but has not issued any regulations specific to virtual assets or digital asset service providers. Timor-Leste Travel Advisory | Travel.State.gov

The Financial Intelligence Unit (FIU) is established as an autonomous body under Law No. 17/2011, Article 30. Its mandate covers receiving, analyzing, and disseminating suspicious transaction reports (STRs) from reporting entities defined in the AML/CFT Law. As of the 2023 APG Mutual Evaluation Report, the FIU has not issued specific guidance on virtual assets or travel-rule obligations. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003 [Note: Immigration and Asylum Act cited only for historical context; FIU is established under Law 17/2011.]

No single authority has been publicly designated to supervise VASPs for AML/CFT purposes or to implement the FATF Travel Rule (Recommendation 16) as applied to virtual assets. The 2023 APG Mutual Evaluation Report assesses Timor-Leste's compliance with FATF Recommendation 15 (virtual assets) as part of its mutual evaluation. Timor-Leste Travel Advice & Safety | Smartraveller

Law No. 17/2011 (Anti-Money Laundering and Combating the Financing of Terrorism) is the primary AML/CFT statute. It defines reporting entities (banks, insurance, remittance providers, etc.), establishes the FIU, and sets out CDD, record-keeping, and STR obligations. It does not define "virtual asset" or "VASP" and contains no travel-rule provisions for virtual asset transfers. Primary source: Jornal da República, Série I, No. 30, 17 August 2011.

Law No. 5/2011 (Central Bank Law) establishes BCTL's mandate, powers, and governance. It authorizes BCTL to regulate and supervise financial institutions but does not mention virtual assets.

Law No. 13/2019 (Financial Sector Legal Framework) consolidates the regulatory regime for the financial sector, including licensing categories for banks, payment institutions, and money transfer operators. It does not include a VASP licensing category.

The Immigration and Asylum Act (Law No. 09/2003) governs immigration control and asylum procedures exclusively. It contains no provisions on financial regulation, AML/CFT obligations for financial institutions, virtual assets, or travel-rule requirements. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

There is no separate "Virtual Asset Act" or "Digital Asset Service Provider Act" in Timor-Leste's published legal corpus (Jornal da República) as of 2025–2026. Timor-Leste International Travel Information

The National Parliament has not enacted any law transposing FATF Recommendations into domestic legislation for virtual assets or travel-rule obligations. Timor-Leste Travel Advisory | Travel.State.gov

Timor-Leste is not a member of the Financial Action Task Force (FATF) but has been a member of the Asia/Pacific Group on Money Laundering (APG) since 2006. It underwent its first APG Mutual Evaluation in 2022–2023, with the report adopted in July 2023 and published on the APG website (apgml.org). The report assesses technical compliance and effectiveness across all 40 FATF Recommendations, including Recommendation 15 (Virtual Assets and VASPs). Timor-Leste Travel Advice & Safety | Smartraveller

The 2023 APG Mutual Evaluation Report notes that Timor-Leste has not yet implemented a regulatory framework for virtual assets or VASPs, and Recommendation 15 is rated Non-Compliant (NC) or Partially Compliant (PC) pending legislative action. Specific rating and findings should be confirmed in the published report. Timor-Leste International Travel Information

Timor-Leste's financial system is dollarized (uses the US dollar) under Law No. 1/2003 (Monetary Regime Law), but dollarization does not imply adoption of US AML rules for crypto businesses operating in Timor-Leste. Timor-Leste Travel Advisory | Travel.State.gov

The 2023 APG Mutual Evaluation Report indicates that Timor-Leste has conducted a National Risk Assessment (NRA) covering money laundering and terrorist financing risks, but the NRA's coverage of virtual asset-specific risks is assessed as limited or absent. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC

There is no licensing regime for cryptocurrency exchanges, wallet providers, or other virtual asset service providers (VASPs) in Timor-Leste under existing law. The licensing categories under Law No. 13/2019 (Financial Sector Legal Framework) and BCTL Instructions cover banks, payment institutions, money transfer operators, and other traditional financial institutions—but not VASPs. Timor-Leste International Travel Information

No application process exists because no law, decree, or ministerial regulation establishes one for digital asset businesses. The closest regulatory analogies are the licensing requirements for Payment Institutions and Money Transfer Operators under BCTL Instruction No. 01/2022 (if in force) or prior instructions, which require minimum capital, fit-and-proper tests, and local presence—but these do not extend to VASPs. Timor-Leste Travel Advisory | Travel.State.gov

The Immigration and Asylum Act of 2003 does not contemplate any form of licensing for financial service providers, let alone crypto-related entities. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

No capital requirements, minimum share capital, or prudential thresholds have been set for crypto businesses, because the category does not exist in the legal framework. For context, BCTL's minimum capital requirements for Payment Institutions under the Financial Sector Legal Framework are USD 500,000 (per BCTL Instruction No. 01/2022 or equivalent), and for Money Transfer Operators, USD 100,000—but these do not apply to VASPs. Timor-Leste Travel Advice & Safety | Smartraveller

Zero entities have been licensed as VASPs in Timor-Leste. There is no public registry or list of authorized crypto service providers on the BCTL or FIU websites. Timor-Leste International Travel Information

Structural requirements such as board composition, local presence, or compliance officer designation for crypto businesses have not been defined in legislation. Timor-Leste Travel Advisory | Travel.State.gov

The term "travel rule" or "travel-rule" does not appear in any Timor-Leste statute, BCTL instruction, or FIU guideline applicable to virtual assets, confirming the absence of a licensing pathway tied to this obligation. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

Law No. 17/2011 (AML/CFT Law) sets out Customer Due Diligence (CDD), record-keeping, and Suspicious Transaction Report (STR) obligations for reporting entities (banks, insurance companies, remittance providers, etc.). These obligations do not extend to VASPs because virtual assets and VASPs are not defined or included in the schedule of reporting entities. Timor-Leste International Travel Information

The Immigration and Asylum Act (Law No. 09/2003) contains provisions regarding record-keeping and identity verification exclusively for immigration and asylum procedures, not financial transactions. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

Enhanced Due Diligence (EDD) for politically exposed persons (PEPs) or high-risk customers is mandated under Law No. 17/2011, Article 15 for reporting entities, but has not been codified for the crypto sector because no such sector is recognized. Timor-Leste Travel Advisory | Travel.State.gov

STR filing obligations exist under Law No. 17/2011, Article 22 for defined reporting entities; no Timor-Leste statute imposes STR duties on VASPs. Timor-Leste Travel Advice & Safety | Smartraveller

Record retention rules under Law No. 17/2011, Article 18 require reporting entities to keep transaction records for at least 5 years. This does not apply to VASPs, as they are not reporting entities. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC

Beneficial ownership identification requirements are set out in Law No. 17/2011, Article 13 for reporting entities, but are not tied to virtual asset transfers in any official source. Timor-Leste International Travel Information

Travel-rule compliance—which requires originator and beneficiary information to accompany virtual asset transfers—has no legal basis in Timor-Leste's current statutes, including Law No. 17/2011, Law No. 5/2011, Law No. 13/2019, or any BCTL instruction. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

No enforcement action against any cryptocurrency business or individual for travel-rule violations has been reported in Timor-Leste, as the legal basis for such violations does not exist. Timor-Leste International Travel Information

No published fines, penalties, or administrative sanctions related to digital asset activities have been issued by BCTL, the FIU, the Ministry of Finance, or the Prosecutor General's Office. Searches of the BCTL website (www.bctl.tl), FIU website (www.fiu.tl), Jornal da República, and local legal databases (as of 2025) return no crypto-specific enforcement notices, sanction lists, or court decisions. Timor-Leste Travel Advisory | Travel.State.gov

The Immigration and Asylum Act of 2003 contains enforcement mechanisms for immigration-related offenses only; no financial integrity violations tied to crypto are included. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

No court case, tribunal decision, or administrative ruling concerning cryptocurrency travel-rule compliance has been made public in Timor-Leste. The court system (Tribunal de Recurso, District Courts) has no published jurisprudence on virtual assets. Timor-Leste Travel Advice & Safety | Smartraveller

The absence of enforcement actions should not be read as regulatory approval; it reflects the absence of any enforceable legal framework for virtual assets. However, general provisions against unlicensed financial activity under Law No. 13/2019 (Financial Sector Legal Framework), Article 10 (prohibition on unauthorized financial activity) could theoretically be applied, but this has not been tested. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC

Primary source not publicly available for enforcement database; further inquiry required with BCTL Supervision Department and FIU.

No tax guidance has been issued for virtual assets in Timor-Leste. The Tax Code (Law No. 13/2008, as amended by Law No. 10/2017 and Law No. 25/2020) and its implementing regulations (Ministerial Orders) contain no reference to capital gains tax, income tax, or VAT treatment of cryptocurrency transactions. Timor-Leste International Travel Information

The Ministry of Finance (Ministério das Finanças) and the General Directorate of Taxes (Direção-Geral dos Impostos) have not published any ruling, circular, or guidance note addressing the taxation of crypto gains, mining, staking, or digital asset businesses. Timor-Leste Travel Advisory | Travel.State.gov

Because no law classifies virtual assets for tax purposes, businesses cannot determine whether crypto profits would be treated as ordinary business income (subject to Corporate Income Tax at 10–30% under Tax Code Article 54), capital gains (potentially exempt or taxed under Article 60), or as exempt transactions. VAT (IVA) under Law No. 10/2017 applies to imports and domestic supply of goods/services at 10%, but the treatment of crypto-to-fiat or crypto-to-crypto exchanges is undefined. Timor-Leste Travel Advice & Safety | Smartraveller

The Immigration and Asylum Act contains no tax provisions, confirming that the only existing legal framework in the sources does not address crypto in any fiscal dimension. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

Primary source not publicly available for crypto-specific tax guidance; further inquiry required with General Directorate of Taxes (DGI).

The most significant gap is the complete absence of a legal definition for "virtual asset," "VASP," or "digital asset" in any Timor-Leste statute (Jornal da República, Laws 17/2011, 5/2011, 13/2019, 13/2008). Timor-Leste International Travel Information

No competent authority has been identified as responsible for supervising crypto businesses for AML/CFT purposes or for enforcing the FATF Travel Rule. The 2023 APG Mutual Evaluation Report recommends designating a supervisory authority for VASPs. Timor-Leste Travel Advisory | Travel.State.gov

Businesses that attempt to voluntarily comply with international travel-rule standards face the risk of having no legal basis for data collection and transfer—potential conflict with data protection norms (no comprehensive data protection law exists) is undefined. Timor-Leste Travel Advice & Safety | Smartraveller

Law No. 17/2011 (AML/CFT Law) is the applicable AML statute—not the Immigration and Asylum Act of 2003. Law 17/2011 predates widespread virtual asset adoption and cannot reasonably be extended to cover travel-rule obligations through interpretation without legislative amendment. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

There is a material risk that crypto businesses operating from Timor-Leste would be treated as unlicensed financial service providers by foreign counterparties or international correspondent banks, limiting access to banking and payment rails. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC

The FATF Travel Rule cannot be implemented without amending Law No. 17/2011 or enacting a dedicated VASP law, and no legislative proposal has been published in the Jornal da República or announced by the Ministry of Finance/BCTL as of 2025–2026. Timor-Leste International Travel Information

Practical reality: a business that wants to be travel-rule compliant in Timor-Leste has no regulator to report to, no standard to follow, and no audit pathway to demonstrate compliance. Timor-Leste Travel Advisory | Travel.State.gov

The risk of regulatory surprise is high: when a law is eventually enacted (likely driven by APG/FATF pressure), it could impose retroactive requirements, create licensing deadlines, or mandate localization of data that existing businesses cannot easily meet. Timor-Leste Travel Advice & Safety | Smartraveller

Foreign jurisdictions will likely require Timor-Leste-based VASPs to demonstrate compliance with their own travel-rule laws (where applicable), creating extraterritorial compliance burdens in the absence of a home-country regime. Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC

Primary Legal Sources (Jornal da República / Official Gazette):

Law No. 17/2011 (Anti-Money Laundering and Combating the Financing of Terrorism) – Primary source for AML/CFT framework, FIU establishment, reporting entity obligations.

Law No. 5/2011 (Central Bank Law) – Primary source for BCTL mandate and powers.

Law No. 13/2019 (Financial Sector Legal Framework) – Primary source for licensing categories for financial institutions.

Law No. 13/2008 (Tax Code), as amended by Law No. 10/2017 (VAT) and Law No. 25/2020 – Primary source for tax treatment.

Law No. 09/2003 (Immigration and Asylum Act) – Cited only for immigration matters; not an AML/CFT law. REPUBLIC OF TIMOR-LESTE NATIONAL PARLIAMENT Law No. 09 / 2003

Banco Central de Timor-Leste (BCTL) website: www.bctl.tl – For BCTL Instructions, licensing registers, enforcement notices.

Financial Intelligence Unit (FIU) website: www.fiu.tl – For FIU guidelines, STR reporting forms, VASP guidance (if any).

Ministry of Finance / General Directorate of Taxes: www.mof.gov.tl – For tax circulars, rulings.

APG Mutual Evaluation Report: Timor-Leste (2023) – Authoritative source for AML/CFT effectiveness, Recommendation 15 assessment, NRA coverage, and supervisory gaps. Available at apgml.org.

Travel Advisories (Context Only – Not Regulatory Authority):

Timor-Leste Travel Advisory | Travel.State.gov

Timor-Leste Travel Advice & Safety | Smartraveller

Timor-Leste (East Timor) - Traveler view | Travelers' Health | CDC